CVE-2026-98474

A flaw was found in the Linux kernel's s390 PCI subsystem. This flaw can lead to a Denial of Service (DoS) due to a missing device lock during PCI (Peripheral Component Interconnect) error recovery. When error recovery status is reported without proper locking, concurrent device operations can access driver data in an inconsistent state, potentially causing the operating system to crash.

This vulnerability is rated as Moderate because exploitation requires local access under specific hardware error conditions, and the potential impact is limited to a system crash without compromising confidentiality or integrity. The issue exclusively affects Linux kernel installations running on IBM Z (s390x) architecture with configured PCI adapters during device error recovery. Non-s390x platforms and deployments without active PCI operations are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.